Questions about Sysctls for gaming on Nintendo Switch with fqcodel
-
Hello. Wondering if these settings are a security concern, or if they are relevant to the connections. They seem to help gaming on the Nintendo Switch while using fqcodel.
net.inet.tcp.ts_offset_per_conn=0 (default is 1)
description: Initialize TCP timestamps per connection instead of per host pair
Seems to help initially but maybe causes issues with extended gaming sessions.net.inet.icmp.drop_redirect=1 (default is 0)
description: ignore ICMP redirects
Seems to help initially but maybe causes issues with extended gaming sessions.net.inet.tcp.fastopen.acceptany=1 (default is 0)
description: Accept any non-empty cookie
Seems to help a lot.net.inet.tcp.syncookies_only=1 (default is 0)
description: Use only TCP SYN cookies
Alternatively is it better to use Synproxy for videogames?net.inet.tcp.isn_reseed_interval=x (default is 0)
Seconds between reseeding of ISN secret. I watched a youtube video and it says this may be necessary for security with the syncache.net.inet.tcp.ecn.maxretries=0 (default is 2)
description: Max retries before giving up on ECN
Seems to help a lot because ECN is not supported by Nintendo Serversdev.igb.0.fc=0 (default is 1)
description: Flow Control
Definitely seems to help a lot if I am using a managed switch. FC frames cause huge pauses in videogames. It may be better if I knew how to tune the flow control high_water and low_water on my NIC. If you have a guide it'd be awesome. dev.igb.0.fc_low_water, dev.igb.0.fc_high_waternet.inet.tcp.icmp_may_rst=0
destription: Certain ICMP unreachable messages may abort connections in SYN_SentAdditionally, should fqcodel limit to the available bandwidth from my ISP, or should it limit based on what the videogame console is capable of? The Nintendo Switch is only capable of 100mbps, although with Squid Proxy I am able to force nearly 300mbps of bandwidth into the Nintendo during downloads.
fqcodel seems to degrade over time with TCP connections, with out of order packets, retransmissions and sometimes broken UDP streams, so I have tried these with some success. The end-goal is to have extended gaming sessions without connections breaking. It seems that fqcodel stinks with low bandwidth applications and others online have suscpected it is because net.inet.ip.dummynet.io_fast alternates on and off while gaming. Thanks for any input.